From aff767a31fc51703e204ec23c5f50ea28b080035 Mon Sep 17 00:00:00 2001 From: Niklas Yann Wettengel Date: Sun, 22 Apr 2018 17:55:15 +0200 Subject: reduce tcp_timeout_established to 1 hour --- roles/configure_sysctl/files/ff.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/configure_sysctl/files/ff.conf b/roles/configure_sysctl/files/ff.conf index 7987e88..d07763d 100644 --- a/roles/configure_sysctl/files/ff.conf +++ b/roles/configure_sysctl/files/ff.conf @@ -20,7 +20,7 @@ net.ipv6.neigh.default.gc_stale_time=3600 # decrease nf_conntrack_tcp_timeout_established - default=432000 net.netfilter.nf_conntrack_max=1048576 net.netfilter.nf_conntrack_buckets=131072 -net.netfilter.nf_conntrack_tcp_timeout_established=86400 +net.netfilter.nf_conntrack_tcp_timeout_established=3600 # reboot after kernel panic kernel.panic=1 -- cgit v1.2.3-54-g00ecf